CVE-2025-48931 | THREATINT

Description

The TeleMessage service through 2025-05-05 relies on MD5 for password hashing, which opens up various attack possibilities (including rainbow tables) with low computational effort.

Reserved 2025-05-28 | Published 2025-05-28 | Updated 2025-05-29 | Assigner mitre

LOW: 3.2CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

Problem types

CWE-328 Use of Weak Hash

Product status

Default status

unknown

Any version

affected

References

www.wired.com/...f-app-telemessage-got-hacked-in-20-minutes/

cve.org (CVE-2025-48931)

nvd.nist.gov (CVE-2025-48931)

Download JSON